Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
File:                     fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa (raw, json)
Hash identifier:          9p5Ac1Fq1OhskYggExhqCI/DN5NrbpUhbQE4S+UwU+A=
Subject key identifier:   13:49:96:D3:46:9A:42:08:29:47:3B:B9:4B:F9:EA:0D:77:B2:9A:80
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BCE799EAB353A25817430
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ce:79:9e:ab:35:3a:25:81:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=46ca35b1-14f8-4a94-baf3-9365fdaaf251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:a1:13:63:60:6a:85:9c:ec:3e:7b:4c:25:
                    05:2d:70:c7:60:d9:88:80:ef:9a:d3:d1:81:92:ed:
                    5f:8d:4b:f9:49:f7:42:31:2e:b4:79:44:a3:a7:30:
                    cd:cc:01:bc:01:a5:b9:58:60:1b:c6:02:c5:b0:a6:
                    fa:fa:82:cc:20:32:96:78:a6:63:7a:dd:6c:74:96:
                    76:a6:5c:0a:30:a8:f9:f5:00:27:8c:e1:a4:c9:8b:
                    86:6d:4a:4f:37:8d:5b:03:57:25:87:8c:62:b6:47:
                    19:db:98:9f:a1:9d:0e:48:04:6f:b0:24:81:16:5f:
                    f3:a6:f5:50:bc:56:2b:0f:fe:eb:f9:8f:ab:60:85:
                    19:f0:25:92:f0:d2:7f:ca:5c:82:c2:44:61:f5:34:
                    79:6c:c0:00:a8:59:90:43:18:44:96:2e:a4:dd:f6:
                    0e:06:c9:03:7a:4f:5d:30:17:43:c1:7f:f0:ea:13:
                    ab:c9:8a:48:ac:f0:8a:6a:9a:5a:51:4f:f0:75:78:
                    0d:a3:78:25:7b:b7:f6:13:a6:0e:0a:58:e8:6e:27:
                    e1:2b:f8:69:07:9d:8f:a7:15:05:66:43:88:3c:b7:
                    b2:e1:f0:08:2a:7f:4d:4e:65:ff:97:da:fc:01:3b:
                    8d:2c:a8:1e:b4:c9:63:4d:4c:be:21:67:6e:96:9d:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:96:D3:46:9A:42:08:29:47:3B:B9:4B:F9:EA:0D:77:B2:9A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8f:b6:e6:b0:93:6c:5d:06:3c:f9:73:a6:d6:a2:61:0f:a0:
         b8:7e:14:bc:e0:d9:d6:c2:ac:a5:06:37:14:90:e6:da:9e:e8:
         39:ae:d4:51:02:d2:80:47:b0:95:6c:0d:22:57:a3:71:b3:ff:
         60:0f:b9:66:4b:8a:0e:dc:ec:8c:c2:d6:d2:a4:c5:a2:6c:8f:
         9d:44:9f:9f:f5:11:7d:42:7c:fd:db:a7:48:d8:ea:d2:89:1e:
         b6:40:c7:87:5f:f2:5e:a3:d3:cf:1f:d6:8c:76:f4:6f:58:0a:
         c9:21:67:27:12:ea:80:02:9d:c9:c6:47:c8:73:ed:58:97:a7:
         52:96:f6:72:c3:ea:e5:fd:c9:b9:7e:ef:fa:88:9a:99:5b:80:
         d2:0b:1d:5a:92:d8:fe:f2:58:46:f5:08:de:f8:1c:89:be:0c:
         11:48:81:d3:c1:d0:2f:55:69:9b:14:e4:20:27:fc:fc:99:e2:
         ad:72:5d:83:de:0c:8d:65:d6:b8:30:f7:07:f7:42:79:3d:e4:
         da:ed:2e:39:f2:98:3e:2f:51:a8:48:ad:6e:86:0e:f8:00:f5:
         8b:bf:fc:84:81:7d:79:29:83:a1:38:f3:df:84:66:38:fa:a4:
         55:73:0f:9d:70:d2:44:75:16:84:45:83:2b:9e:16:b6:a2:fb:
         cc:bd:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:26 2026 by rpki-client